General

  • Target

    a92ebbd861bebbb9538f8239b9cd01bd909c51f75205ad531a45036c3f72d2f7.exe

  • Size

    31KB

  • MD5

    d1d823832afb7df34906c2fde1ad760f

  • SHA1

    758d20fbfa4d3428d2a2b76ed5f4283c3d71f1af

  • SHA256

    a92ebbd861bebbb9538f8239b9cd01bd909c51f75205ad531a45036c3f72d2f7

  • SHA512

    950d88593f3a5e91fc4451fc389b6a9185c57421c8265a19212c17379124c1fbc09355fb084e7862b120d825a2069f8d464d921b24e05993c6d9f98d19aa4813

  • SSDEEP

    768:36s2ZOVvZVYzxDCPIAT+vCQEpvywHQmIDUu0tipKj:o+6qJQ6DQVkZj

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

MyBot

C2

172.25.240.1:2097

Mutex

52c92c6180e2d06927530d572f7adfe4

Attributes
  • reg_key

    52c92c6180e2d06927530d572f7adfe4

  • splitter

    Y262SUCZ4UJJ

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a92ebbd861bebbb9538f8239b9cd01bd909c51f75205ad531a45036c3f72d2f7.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections